This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json) Hash identifier: iBwGWI5Va9OtscTEYXTYxSXFlRZRKdaJNxewNfWI3mI= Subject key identifier: FA:15:2B:0B:D4:E2:3F:53:FA:BD:D3:67:45:BB:04:3E:6A:B5:6A:27 Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Certificate serial: 019B6AD74ED34783C96C027097D8C6C97E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft Manifest number: 067F Signing time: Mon 29 Dec 2025 16:00:53 +0000 Manifest this update: Mon 29 Dec 2025 16:00:53 +0000 Manifest next update: Tue 30 Dec 2025 16:00:53 +0000 Files and hashes: 1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=) 2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: AHKx1J4jIvf98BKQ8sFsm/ov73VAXlnrJQrO30FzO5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:4e:d3:47:83:c9:6c:02:70:97:d8:c6:c9:7e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Validity Not Before: Dec 29 16:00:53 2025 GMT Not After : Dec 30 16:00:53 2025 GMT Subject: CN=fa152b0bd4e23f53fabdd36745bb043e6ab56a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:9b:47:82:c3:49:94:a7:e7:d9:97:70:1f: d9:29:44:30:c5:d4:12:11:e6:32:31:86:f9:18:5d: 7b:e9:bd:61:65:00:9f:ea:56:67:d1:1f:df:8b:78: 13:0e:e2:0e:64:8c:74:b5:bd:90:e9:5a:40:14:a9: db:ec:e7:c6:4b:15:45:c0:68:98:40:a6:ea:4d:22: 0a:67:d1:48:96:75:e2:0a:73:fd:b2:fa:2d:51:4a: 60:97:ce:95:00:78:bd:45:83:b6:8d:52:dc:04:75: 06:ad:e8:33:0d:55:d1:84:e0:46:a4:c9:5b:29:06: 5f:cb:ff:88:57:d0:e2:04:ef:b8:7d:60:75:ae:82: e4:b7:78:6a:a5:cf:cd:a7:bd:d2:3c:25:41:cf:4d: c0:14:86:1b:91:6f:5c:45:30:ae:ce:b6:5e:f1:ea: 64:f3:98:8b:2c:54:65:fc:9a:20:dd:7f:e9:33:5b: f1:b4:07:1a:56:50:ab:43:22:92:95:8e:6e:01:f1: dd:2c:ec:b9:a1:58:e9:fb:d8:eb:19:15:00:e1:5f: 60:8f:9e:f7:e3:8b:5b:86:32:56:2d:09:38:e2:9b: 27:e6:b4:d0:18:b4:c2:48:c9:96:b1:29:9a:3b:7a: a4:52:e4:42:02:e8:cd:43:e2:ca:4e:44:dc:91:d3: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:2B:0B:D4:E2:3F:53:FA:BD:D3:67:45:BB:04:3E:6A:B5:6A:27 X509v3 Authority Key Identifier: keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c1:28:45:7c:4a:52:51:82:5c:75:c1:25:5d:7c:f0:a0:94: 81:33:c9:49:94:90:e0:90:ef:9c:df:ef:10:7a:5a:32:25:90: 8d:08:31:7f:d6:da:5b:17:f2:f7:2f:c9:29:fa:aa:10:65:41: 0e:f4:4f:21:24:ad:fc:a7:66:4e:1d:fa:a0:b3:41:47:dc:1b: 5a:1b:ea:66:2b:19:10:7e:72:99:8b:9c:ad:8a:7e:71:30:40: 01:ca:7b:48:92:68:bf:c1:d7:ea:56:33:47:6e:66:5a:8f:ac: f9:f9:2a:c6:2c:cb:7c:39:83:5f:56:49:45:25:c1:73:68:f2: 41:f2:cc:c0:fa:63:2b:d6:b3:10:9f:5f:f4:81:3d:c8:b0:23: b3:ce:53:ff:cb:ac:1a:78:41:af:6c:d8:31:4b:b0:a9:3f:50: 80:e7:5a:0d:8e:a8:92:80:41:52:81:7a:22:16:63:c5:f7:6c: bf:2e:12:6d:3f:c9:24:82:82:a3:59:8d:58:ac:ac:80:df:e4: 89:8f:1a:33:22:7f:8d:5a:da:c6:69:cb:23:e7:31:4a:27:ed: a9:f4:f0:7f:92:32:c0:ff:c2:cc:83:6e:ba:94:07:91:ae:94: 30:fd:07:34:25:fe:e8:40:b8:21:fa:56:25:b2:35:b6:11:0a: 24:46:b9:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq107TR4PJbAJwl9jGyX4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjBhZTY2NmE2ODJiNDI0ZjZjOTk0YWIyZTAxNGRjM2M2 NGZiY2YwHhcNMjUxMjI5MTYwMDUzWhcNMjUxMjMwMTYwMDUzWjAzMTEwLwYDVQQD EyhmYTE1MmIwYmQ0ZTIzZjUzZmFiZGQzNjc0NWJiMDQzZTZhYjU2YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDabR4LDSZSn59mXcB/ZKUQwxdQS EeYyMYb5GF176b1hZQCf6lZn0R/fi3gTDuIOZIx0tb2Q6VpAFKnb7OfGSxVFwGiY QKbqTSIKZ9FIlnXiCnP9svotUUpgl86VAHi9RYO2jVLcBHUGregzDVXRhOBGpMlb KQZfy/+IV9DiBO+4fWB1roLkt3hqpc/Np73SPCVBz03AFIYbkW9cRTCuzrZe8epk 85iLLFRl/Jog3X/pM1vxtAcaVlCrQyKSlY5uAfHdLOy5oVjp+9jrGRUA4V9gj573 44tbhjJWLQk44psn5rTQGLTCSMmWsSmaO3qkUuRCAujNQ+LKTkTckdPpIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoVKwvU4j9T+r3TZ0W7BD5qtWonMB8GA1UdIwQY MBaAFBlgrmZqaCtCT2yZSrLgFNw8ZPvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUt NTIzZDIwOTI1ZGFkLzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUtNTIzZDIwOTI1ZGFk LzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8EoRXxK UlGCXHXBJV188KCUgTPJSZSQ4JDvnN/vEHpaMiWQjQgxf9baWxfy9y/JKfqqEGVB DvRPISSt/KdmTh36oLNBR9wbWhvqZisZEH5ymYucrYp+cTBAAcp7SJJov8HX6lYz R25mWo+s+fkqxizLfDmDX1ZJRSXBc2jyQfLMwPpjK9azEJ9f9IE9yLAjs85T/8us GnhBr2zYMUuwqT9QgOdaDY6okoBBUoF6IhZjxfdsvy4SbT/JJIKCo1mNWKysgN/k iY8aMyJ/jVraxmnLI+cxSiftqfTwf5IywP/CzINuupQHka6UMP0HNCX+6EC4IfpW JbI1thEKJEa5pQ== -----END CERTIFICATE-----Generated at Mon Dec 29 18:01:15 2025 by rpki-client